Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS152672.roa
File: AS152672.roa (raw, json)
Hash identifier: cZUE+bZv3F9Wb9EMsI1IVXGF0ynCy7KhCmhGEu0qCI4=
Subject key identifier: 50:8A:72:84:58:EE:29:D1:A6:74:32:F1:B3:ED:51:96:60:82:2B:EE
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 42C3D6426963BBFC4311C31F4A6054B35581FB11
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS152672.roa
Signing time: Sun 13 Apr 2025 03:54:01 +0000
ROA not before: Sun 13 Apr 2025 03:49:01 +0000
ROA not after: Sun 12 Apr 2026 03:54:01 +0000
asID: 152672
IP address blocks: 45.146.82.0/24 maxlen: 24
45.158.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:c3:d6:42:69:63:bb:fc:43:11:c3:1f:4a:60:54:b3:55:81:fb:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Apr 13 03:49:01 2025 GMT
Not After : Apr 12 03:54:01 2026 GMT
Subject: CN=508A728458EE29D1A67432F1B3ED519660822BEE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b2:ec:ba:88:42:f9:b7:33:af:d6:c4:c8:02:
f2:b3:31:ca:35:80:a1:6f:2a:3c:d0:8f:df:91:d3:
15:38:03:a3:0a:93:b2:22:1f:91:0b:b9:f6:02:78:
a3:78:40:96:10:a6:fc:19:fc:6d:6e:d0:e5:0f:43:
b2:49:0b:94:b9:c2:ac:df:fc:67:19:9f:0e:d8:89:
29:9e:b5:24:73:fb:76:9b:d8:2f:d7:3a:a6:00:9f:
4b:47:1c:83:a7:5c:61:cd:f9:76:35:71:29:b5:69:
62:ba:3d:77:18:bd:cd:0a:0e:e0:f5:7d:7a:c4:2c:
79:f7:17:99:83:c8:24:e3:74:dc:8f:81:f4:fd:34:
bd:22:15:09:f6:23:e2:17:09:fa:40:d5:ef:15:80:
8e:11:f4:c7:a5:28:97:98:2c:9d:55:7e:16:df:7b:
18:35:57:6d:a7:be:a5:3d:cb:f4:91:d5:28:f5:b5:
26:b8:fb:c5:ff:03:26:26:8b:4d:6d:c2:9e:41:e2:
56:e2:a4:81:dc:12:45:53:eb:82:4a:12:fd:2c:97:
b9:7c:9a:8e:cf:25:0d:3b:ff:da:de:61:cc:1d:1e:
ac:af:f6:51:6b:d7:98:eb:58:79:c6:00:a2:ec:25:
b8:aa:b0:86:64:06:62:7c:b2:e4:62:fc:66:e3:3d:
61:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:8A:72:84:58:EE:29:D1:A6:74:32:F1:B3:ED:51:96:60:82:2B:EE
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS152672.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.82.0/24
45.158.11.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:f1:fb:83:60:82:ec:05:a1:28:cf:3d:aa:73:18:19:94:39:
83:8c:10:71:5f:46:5c:91:7d:6c:07:0c:aa:09:76:29:ac:12:
7e:4b:f4:a6:8e:2d:5f:8f:2f:fe:0b:b4:de:87:2a:80:6d:32:
92:5f:40:1c:5e:8a:3d:cc:86:32:57:da:e3:2b:24:61:6d:36:
c2:c4:42:6b:1c:8a:be:c1:30:bc:5a:57:4b:2d:70:2f:38:20:
14:ed:aa:cc:61:74:77:1a:43:e3:c6:49:9b:74:0a:fd:dc:5d:
dc:b8:c1:5d:3f:3d:45:87:a1:c0:17:44:d3:ae:5e:0f:25:b2:
10:5f:68:9e:8b:e2:03:3a:87:9d:f9:4c:10:62:8c:46:da:40:
e6:e5:7b:7e:00:02:31:d4:f6:4c:78:b8:1e:f4:3e:2a:a4:e5:
23:aa:61:e1:25:49:b1:53:f3:b6:90:57:73:57:13:d9:d7:fb:
01:fb:fa:1f:2e:99:62:e2:2c:f0:d4:bc:7c:1a:c2:b7:ee:ab:
43:da:26:17:3c:e0:26:d2:f8:00:a7:3d:58:55:b9:1f:73:47:
44:50:27:79:e9:be:cb:51:dd:05:3a:6e:c8:37:37:07:88:33:
4f:1f:d5:be:58:93:36:91:6d:e2:ac:15:63:f7:d6:96:79:c2:
cf:58:cd:b1
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIUQsPWQmlju/xDEcMfSmBUs1WB+xEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDNiMWJhM2ZkYjkxZDhkOWVhNzZjNTc3NjMyMGViN2Vi
MmQ2ZWQ5ZDAeFw0yNTA0MTMwMzQ5MDFaFw0yNjA0MTIwMzU0MDFaMDMxMTAvBgNV
BAMTKDUwOEE3Mjg0NThFRTI5RDFBNjc0MzJGMUIzRUQ1MTk2NjA4MjJCRUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClsuy6iEL5tzOv1sTIAvKzMco1
gKFvKjzQj9+R0xU4A6MKk7IiH5ELufYCeKN4QJYQpvwZ/G1u0OUPQ7JJC5S5wqzf
/GcZnw7YiSmetSRz+3ab2C/XOqYAn0tHHIOnXGHN+XY1cSm1aWK6PXcYvc0KDuD1
fXrELHn3F5mDyCTjdNyPgfT9NL0iFQn2I+IXCfpA1e8VgI4R9MelKJeYLJ1Vfhbf
exg1V22nvqU9y/SR1Sj1tSa4+8X/AyYmi01twp5B4lbipIHcEkVT64JKEv0sl7l8
mo7PJQ07/9reYcwdHqyv9lFr15jrWHnGAKLsJbiqsIZkBmJ8suRi/GbjPWFbAgMB
AAGjggIQMIICDDAdBgNVHQ4EFgQUUIpyhFjuKdGmdDLxs+1RlmCCK+4wHwYDVR0j
BBgwFoAUA7G6P9uR2NnqdsV3YyDrfrLW7Z0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2ZmMGY1NTUtZGJhNy00MTkyLWEwMWQtZjY5MTZkNWJi
ODRlLzAvMDNCMUJBM0ZEQjkxRDhEOUVBNzZDNTc3NjMyMEVCN0VCMkQ2RUQ5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0E3RzZQOXVSMk5ucWRzVjNZeURyZnJM
VzdaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzdmZjBmNTU1LWRiYTct
NDE5Mi1hMDFkLWY2OTE2ZDViYjg0ZS8wL0FTMTUyNjcyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALZJS
AwQALZ4LMA0GCSqGSIb3DQEBCwUAA4IBAQCh8fuDYILsBaEozz2qcxgZlDmDjBBx
X0ZckX1sBwyqCXYprBJ+S/Smji1fjy/+C7TehyqAbTKSX0AcXoo9zIYyV9rjKyRh
bTbCxEJrHIq+wTC8WldLLXAvOCAU7arMYXR3GkPjxkmbdAr93F3cuMFdPz1Fh6HA
F0TTrl4PJbIQX2iei+IDOoed+UwQYoxG2kDm5Xt+AAIx1PZMeLge9D4qpOUjqmHh
JUmxU/O2kFdzVxPZ1/sB+/ofLpli4izw1Lx8GsK37qtD2iYXPOAm0vgApz1YVbkf
c0dEUCd56b7LUd0FOm7INzcHiDNPH9W+WJM2kW3irBVj99aWecLPWM2x
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:27 2025 by rpki-client on console.sobornost.net